[Bro-Dev] #264: topic/seth/mpls - Experimental MPLS support.

[Bro Tracker]

#264: topic/seth/mpls - Experimental MPLS support.
----------------------------+--------------------
  Reporter:  robin          |      Owner:
      Type:  Merge Request  |     Status:  new
  Priority:  Normal         |  Milestone:  Bro1.6
 Component:  Bro            |    Version:  1.5.1
Resolution:                 |   Keywords:  sprint
----------------------------+--------------------

Comment (by robin):

 I have a some questions. :)

 - not sure what the part is that you "*think*" will happen. Are you
 wondering whether "ip or not ip" will let vlan/mpls through? or whether we
 have indeed decided to make that the default filter? or whether the new
 filter code works at all?

 - seems the code no longer needs the `mpls_link` option, correct?

 - do we have small test trace with mixed MPLS/VLAN traffic?

 - one of the above questions doesn't seem answered: can there be VLAN over
 MPLS, and/or MPLS over VLAN? The code currently doesn't handle
 combinations.

 - to double-check my MPLS knowledge: is it right that with MPLS there's no
 way to find out whether the packets are actually of transport-layer type
 IP4/6?

 - the patch removes `vlan.bro` and some code in `pcap.bro` to handle that.
 Isn't the ``vlan`` keyword  still needed for BPF for doing more
 restrictive filters?

-- 
Ticket URL: <http://tracker.icir.org/bro/ticket/264#comment:10>
Bro Tracker <http://tracker.icir.org/bro>
Bro Issue Tracker